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DETAILED ACTION 

1 . This action is responding to application papers filed on 12-12-2003. 

2. Claims 1 - 15 are pending. Claims 10 - 15 are new. Claims 1, 12, 15 are 
independent. 

Response to Arguments 

3. Applicant's arguments filed 12/26/2007 have been fully considered but they are not 
persuasive. 

3.1 After considering Applicant's remarks the 101 rejection in the previous Office 
Action has been withdrawn, (see Remarks page 7) 

3.2 Applicant argues that the referenced prior art does not disclose, "determine 
number of points on elliptic curve" or "a lifted Frobenius equation", (see Remarks Page 
7) 

There is no disclosure of a lifted Frobenius equation in the specification or the 
original claims which can be used in the determination of number of points on an 
elliptical curve, (see USC 1 1 2 Rejection) The specification does disclose canonical lift 
which is addressed in a separate claim limitation (claim 4). The Hoffstein prior art 
discloses calculations with Frobenius equations and elliptic curves, (see Hoffstein col. 
3, lines 59-62: Frobenius operation on elliptic curves; col. 8, lines 7-1 1 : using elliptic 
curves) 
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3.3 Applicant argues, "Penner does not mention elliptic curves", (see Remarks Page 
8) 

The Penner prior art does disclose mathematical calculations based on algorithms. 
The basis for the claimed invention is a sequence of mathematical calculations based 
on algorithms or equations. All of the referenced prior art (Hoffstein, Gressel, Penner) 
are in the same field of endeavor as the claimed invention, mathematical calculations 
using algorithms arithmetic operations. 

3.4 Applicant argues that the referenced prior art does not disclose, "Gressel does not 
mention Frobenius equations", (see Remarks Page 8) 

The claimed invention is partially directed to Frobenius equations, which are 
disclosed in the Hoffstein prior art. In addition, the claimed invention is also partially 
directed toward mathematical calculations using elliptic curves, which is disclosed in the 
Gressel prior art. The Gressel prior art is not used to reject claim limitations addressing 
computations using Frobenius equations. 

3.5 Applicant argues, "dependent claims", (see Remarks Page 9) 
Arguments for dependent claims are based upon above arguments for 

independent claims 1, 12, 14. The successful responses to arguments for independent 
claims 1, 12, 14, also successfully respond to the current arguments against the 
accompanying dependent claims, 2-11,13, and 1 5. 

3.8 The claim limitations recite arithmetic operations which are performed on integer 
values using mathematical algorithms. The Hoffstein, Gressel and Penner prior art 
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references disclose arithmetic operations performed on integer values. The stated 
types of operations indicated by the prior art discloses arithmetic operations, partial 
result operations, multiplication operations, and register usage. 

The Hoffstein prior art discloses arithmetic operations using elliptic curves and 
Frobenius equations. The Gressel prior art discloses the results of a first arithmetic 
operation used as input to another arithmetic operation such as a first and second 
partial result combined to generate a final result. 

And, the Gressel prior art discloses partial results from an arithmetic operation, 
(see Gressel col. 2, lines 31-37: arithmetic operations utilizing partial results from 
previous multiplication) in addition, the Gressel prior art discloses storing and utilizing 
the results of a previous operation in subsequent arithmetic operations, (see Gressel 
col. 3, lines 1-7; col. 53, lines 13-19; coi. 53, Sines 49-51 : feedback of a previous 
operation into a next (subsequent) operation) 

The Penner prior art discloses performing canonical lift calculations, Teichmulier 
calculations, recursive operations, and error type algorithmic arithmetic operations 

3.7 The examiner has considered the applicant's remarks concerning new methods 
for computing high-precision solutions of Frobenius equations that arise in elliptic-curve 
cryptography. In particular, this invention may be used to accelerate the computation of 
the number of points on an elliptic curve over a finite field and faster than previously 
known methods. The methods enable optimally fast canonical lifting of elliptic curves 
defined over finite fields, optimally fast pre-computations to determine an efficient 
representation of intermediate quantities, and optimally fast lifting of finite-field elements 
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to compute multiplicative representatives. Applicant's arguments have thus been fully 
analyzed and considered but they are not persuasive. 

After an additional analysis of the applicant's invention, remarks, and a search of 
the available prior art, it was determined that the current set of prior art consisting of 
Hoffstein (7,031,468), Gressel (6,748,410) and Penner (7,158,569) discloses the 
applicant's invention. 

Claim Rejections - 35 USC § 101 

4. 35 U.S.C. 101 reads as follows: 

Whoever invents or discovers any new and useful process, machine, manufacture, or composition of 
matter, or any new and useful improvement thereof, may obtain a patent therefor, subject to the 
conditions and requirements of this title. 

5. The claimed invention is directed to non-statutory subject matter. Claim 14 is 
rejected as directed toward non-statutory subject matter. Claim 14 is claiming: "logic 
for receiving"; "logic for determining"; and some mathematical computations without 
having any hardware elements in the claim for performing the functions that have been 
claimed. There is no disclosure that the claim limitations for "logic for receiving" and 
"logic for determining" are hardware implementations. A strictly software 
implementation is directed toward non-statutory subject matter. Therefore, claim 
limitations for Claim 14 are strictly software implementations and directed toward non- 
statutory matter. Appropriate correction required. 
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Specification Objection 

6. The specification is objected to as failing to provide proper antecedent basis for 
the claimed subject matter. See 37 CFR 1.75(d)(1) and MPEP § 608.01(g), Correction 
of the following is required: Claims 12, 13 recites "a computer-readable medium". There 
is no disclosure in the specification for the above said medium. 

Claim Rejections - 35 (JSC § 112 

7. The following is a quotation of the first paragraph of 35 U.S.C. 112: 

The specification shall contain a written description of the Invention, and of the manner and process of 
making and using it, in such full, clear, concise, and exact terms as to enable any person skilled in the 
art to which it pertains, or with which it is most nearly connected, to make and use the same and shall 
set forth the best mode contemplated by the invs < , g out his invention. 

8. Claims 12, 13 are rejected under 35 U.S.C. 112, first paragraph, as failing to 
comply with the written description requirement. The claim(s) contains subject matter 
which was not described in the specification in such a way as to reasonably convey to 
one skilled in the relevant art that the inventor(s), at the time the application was filed, 
had possession of the claimed invention. The term "readable medium" does not appear 
within the specification or the original claims. Therefore, there is insufficient antecedent 
basis for the claimed invention as amended. Appropriate correction is required. 

Claim Rejections - 35 USC §112 

9. The following is a quotation of the second paragraph of 35 U.S.C. 112: 

The specification shall conclude with one or more claims parti >o "iting out and distinctly- 

claiming the subject matter which the applicant regards as his Invention. 
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10. Claims 1, 12, Mare rejected under 35 U.S.C. 112, second paragraph, as being 
indefinite for failing to particularly point out and distinctly claim the subject matter which 
applicant regards as the invention. There is no disclosure within the specification or the 
original claim for the following claim limitation, "determining the number of points on the 
elliptic curve, wherein the determining includes solving a lifted Frobenius equation to a 
full precision by using first and second parts with a reduced precision". There is no 
disclosure In the specification paragraph [0010], there is a disclosure of a number of 
points computed as a norm: "a second phase computes a norm to determine the 
number of points on the curve as output". There is no disclosure of the claim limitation 
as amended. Appropriate correction required. 

Claims 1, 12, 14 are rejected under 35 U.S.C. 112, second paragraph, as being 
indefinite for failing to particularly point out and distinctly claim the subject matter which 
applicant regards as the invention. There is no disclosure within the specification or the 
original claim for the following claim limitation, "lifted Frobenius". There is no disclosure 
of the claim limitation as amended. Appropriate correction required. 

Claim Rejections - 35 USC § 103 

1 1 . The following is a quotation of the appropriate paragraphs of 35 U.S.C. 1 03 that 
form the basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 
(e) the invention was described in (1 ) an application for patent, published under section 1 22(b), by another 
filed in the United States before the invention by the applicant for patent or (2) a patent granted on an 
application for patent by another filed in the United States before the invention by the applicant for patent, 
except that an international application filed under the treaty defined in section 351 (a) shall have the effects 
for purposes of this subsection of an application filed in the United States only if the international 
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application designated the United States and was published under Article 21(2) of such treaty in the 
English language. 

12. Claims 1 - 15 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Hoffstein et al. (US Patent No. 7,031,468) in view of Gressel et al. (US Patent No. 
6,748,410) and further in view of Penner (US Patent No. 7,158,569). 

Regarding Claim 1, Hoffstein discloses a computer-implemented method for computing 
the number of points on an elliptic curve the method comprising: 

a) receiving a n elliptic curve having a number of points on the curve; (see Hoffstein 
col. 3, lines 59-62: Frobenius operation on elliptic curves; col. 8, lines 7-1 1 : using 
elliptic curves; col. 3, lines 7-9: computer system; software, computer 
implemented) 

b) determining the number of points on the elliptic curve, wherein the determining 
includes solving a lifted Frobenius equation to a full precision by using first and 
second parts with a reduced precision, (see Hoffstein col. 3, lines 59-62; col. 8, 
lines 7-1 1 : Frobenius operation on elliptic curves utilizing elliptic curves; (see 
Hoffstein col. 1 , lines 56-59: computation using a number of points on elliptic 
curves over a finite field; elliptic curve defined by a group of points; a 
computation used to ); 

wherein the solving includes: 

a) computing to the reduced precision, said first part firstly computes a first 
partial solution of said lifted Frobenius equation using said first part 
recursively, (see Hoffstein col. 3, lines 59-62: Frobenius operation on elliptic 
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curves; col. 8, lines 7-11: utilizing elliptic curves) and (see Gressel col. 3, lines 
1-7; col. 53, lines 13-19; col. 53, lines 49-51 : feedback of a previous operation 
into next operation; col. 3, lines 28-32; col. 11, lines 7-1 1 ; col. 1 1 , lines 40-49: 
arithmetic operation or instructions) and (see Penner col. 20, lines 11-16: 
recursive operations) 

b) applying a Frobenius operation to said first partial solution, (see Hoffstein col. 
3, lines 59-62: Frobenius operation on elliptic curves; col. 8, lines 7-1 1 : 
utilizing elliptic curves) 

c) computing an error term/correction factors for said lifted Frobenius equation; 
computing correction factors for said lifted Frobenius equation, (see Hoffstein 
col. 3, lines 59-62: Frobenius operation on elliptic curves; col. 8, lines 7-1 1 : 
utilizing elliptic curves) and (see Penner col. 20, lines 8-1 1 : error terminate) 

d) computing, to the reduced precision (see Penner col. 1 , lines 62-63: precision 
algorithmic operations), a second partial solution of a modified lifted 
Frobenius equation that includes the error term and the correction factors 
(see Hoffstein col. 3, lines 59-62: Frobenius operation on elliptic curves; col. 
8, lines 7-1 1 : utilizing elliptic curves) using said second part (see Gressel col. 
3, lines 1-7; col. 53, lines 13-19; col. 53, lines 49-51 : feedback of a previous 
operation into next operation) 

wherein computing the second partial solution includes: 

e) computing, to the reduced precision, a third partial solution of said modified 
lifted Frobenius equation using said second part recursively (see Gressel 
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col. 3, lines 1-7; col. 53, lines 13-19; col. 53, lines 49-51 : feedback of a 
previous operation into next operation; col. 3, lines 28-32; col. 11, lines 7- 
1 1 ; col. 1 1 , lines 40-49: arithmetic operation or instructions) and (see 
Penner col. 20, lines 11-16: recursive operations) 

f) applying a Frobenius operation to said third partial solution, (see H off stein 
col. 3, lines 59-62: Frobenius operation on elliptic curves; col. 8, lines 7- 

1 1 : utilizing elliptic curves) and (see Gressel col. 3, lines 1 -7; col. 53, lines 
1 3-1 9; col. 53, lines 49-51 : feedback of a previous operation into next 
operation; col. 7, lines 28-33: col. 26, lines 6-26: partial result algorithmic 
operations) 

g) updating said error term, (see Penner col. 20, lines 8-1 1 : error terminate) 

h) computing, to the reduced precision, a fourth partial solution of said 
modified lifted Frobenius equation using said second part recursively (see 
Gressel col. 3, lines 1-7; col. 53, lines 13-19; col. 53, lines 49-51 : feedback 
of a previous operation into next operation; col. 7, lines 28-33: col. 26, 
lines 6-26: partial result algorithmic operations) and (see Penner col. 20, 
lines 11-16: recursive operations) 

i) combining said third partial solution and said fourth partial solution to 

create the second par tial solution, (see Gressel col. 3, lines 1-7; col. 53, 
lines 13-19; col. 53, lines 49-51 : feedback of a previous operation into next 
operation; col. 7, lines 28-33: col. 26, lines 6-26: partial result algorithmic 
operations) 
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f) combining said first partial solution and said second partial solution to provide 
the solution at the full precision (see Gressei col. 3, lines 1-7; col. 53, lines 
1 3-1 9; col. 53, lines 49-51 : feedback of a previous operation into next 
operation; col. 7, lines 28-33: col. 26, lines 6-26: partial result algorithmic 
operations) 

Gressei discloses partial (first, second) algorithmic operations in the mathematical 
calculations used to generate a cryptographic key. 

It would have been obvious to one of ordinary skill in the art to modify Hoffstein 
to perform partial algorithmic operations in the generation of a cryptographic key as 
taught by Gressei. One of ordinary skill in the art would have been motivated to 
employ the teachings of Gressei in order to enable the capability to provide for 
accelerating and securing improved methods for modular and exponentiation 
algorithmic operations, (see Gressei col. 1 , lines 39-45: " ... The present invention 
seeks to provide improved apparatus and methods for modular multiplication and 
exponentiation and for serial integer division, and for accelerating and securing 
modular arithmetic processors and accelerating memory transfers to computer 
peripheral that need simplified accelerated memory to peripheral data transfers with 
limited CPU core changes. ... ") 



Penner discloses canonical lift, TeichmuHer lift of a given finite-field polynomial, 
recursive operations, and precision algorithmic operations. 
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It would have been obvious to one of ordinary skill in the art to modify Hoffstein 
to enable the capability to perform canonical, Teichmulier, recursive, and error type 
algorithmic operations as taught by Penner. One of ordinary skill in the art would 
have been motivated to employ the teachings of Penner in order to enable the 
capability to provide new, novel, and efficient methods for calculating algorithmic 
transform operations, (see Penner col. 1 , lines 52-55: " ... In combination with these 
wavelet filters, the invention also provides new methods for calculating various 
classical transforms including the Fourier transform and its inverse. This 
immediately provides novel and efficient methods for digital filtering. ... ") 

Regarding Claim 2, Hoffstein discloses the method of claim 1 . (see Hoffstein col. 3, 
lines 59-62: Frobenius operation on elliptic curves; col. 8, lines 7-1 1 : utilizing elliptic 
curves; col. 3, lines 54-56: finite field polynomial operations) Hoffstein does not 
specifically disclose reduced precision is one half of said given full precision. However, 
Penner discloses in which said reduced precision is one half of said given full precision, 
(see Penner col. 1, lines 62-63: precision algorithmic operations) 

It would have been obvious to one of ordinary skill in the art to modify Hoffstein to 
perform precision algorithmic operations as taught by Penner. One of ordinary skill in 
the art would have been motivated to employ the teachings of Penner in order to enable 
the capability to provide new, novel, and efficient methods for calculating algorithmic 
transform operations, (see Penner col. 1 , lines 52-55) 
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Regarding Claim 3, Hoffstein discloses the method of claim 1. (see Hoffstein col. 3, 
lines 59-62: col. 8, lines 7-1 1 ; col. 3, lines 54-56: Frobenius operation on elliptic curves; 
finite field polynomial operations) 

Gressel discloses computations using said first and second parts, (see Gressel 
col. 3, lines 1-7; col. 53, lines 13-19; col. 53, lines 49-51: feedback of a previous 
operation into next operation; col. 3, lines 28-32; col. 11, lines 7-1 1 ; col. 1 1 , lines 40-49: 
arithmetic operation or instructions) 

It would have been obvious to one of ordinary ski!! in the art to modify Hoffstein to 
perform partial algorithmic operations as taught by Gressel. One of ordinary skill in the 
art would have been motivated to employ the teachings of Gressel in order to enable 
the capability to provide for accelerating and securing improved methods for modular 
and exponentiation algorithmic operations, (see Gressel col. 1 , lines 39-45) 

And, Penner discloses computing the Teichmuller lift of a given finite-field 
polynomial, (see Penner col. 7, lines 25-29; col. 25, lines 13-17: canonical lift; col. 26, 
line 31 : Teichmuller lift of a given finite-field polynomial) 

It would have been obvious to one of ordinary skill in the art to modify Hoffstein to 
perform canonical, Teichmuller type algorithmic operations as taught by Penner. One 
of ordinary skill in the art would have been motivated to employ the teachings of Penner 
in order to enable the capability to provide new, novel, and efficient methods for 
calculating algorithmic transform operations, (see Penner col. 1 , lines 52-55) 
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Regarding Claim 4, Hoffstein discloses the method of claim 1 on said elliptic curves. 

(see Hoffstein col. 3, lines 59-62: co!. 8, Sines 7-11; col. 3, lines 54-56: Frobenius 
operation on elliptic curves; finite field polynomial operations) Hoffstein does not 
specifically disclose canonical lift. However, Penner discloses in which said first and 
second parts compute the canonical lift, (see Penner col. 7, lines 25-29; col. 25, lines 
13-17: canonical lift) 

It would have been obvious to one of ordinary ski!! in the art to modify Hoffstein to 
enable the capability to perform canonicai Sift as taught by Penner. One of ordinary skill 
in the art would have been motivated to employ the teachings of Penner in order to 
enable the capability to provide new, noveL and efficient methods for calculating 
algorithmic transform operations, (see Penner co!. 1 , lines 52-55) 

Regarding Claim 5, Hoffstein discloses the method of claim 1 of a given finite-field 
element, (see Hoffstein col. 3, lines 59-62: co!. 8, lines 7-1 1 ; col. 3, lines 54-56: 
Frobenius operations on elliptic curves; finite field polynomial operations) Hoffstein 
does not disclose said first and second parts compute the multiplicative representative. 
However, Gressei discloses in which said first and second parts compute the 
multiplicative representative, (see Gressei co!. 3, lines 1-7; col. 53, lines 13-19; col. 53, 
lines 49-51 : feedback of a previous operation into next operation; col. 3, lines 28-32; col. 
1 1 , lines 7-1 1 ; col. 1 1 , lines 40-49: arithmetic operation or instructions; col. 2, lines 31 - 
37: multiplication operations; col. 29, iines 43-49: representation of numbers) 
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It would have been obvious to one of ordinary skiii in the art to modify Hoffstein to 
enable the capability to perform partial algorithmic operations as taught by Gressei. 
One of ordinary skill in the art would have been motivated to employ the teachings of 
Gressei in order to enable the capability to provide for accelerating and securing 
improved methods for modular and exponentiation algorithmic operations, (see 
Gressei col. 1 , lines 39-45) 

Regarding Claim 6, Hoffstein discloses the method of claim 1 in which a given p-adic 
number, (see Hoffstein col. 1 , lines 56-59: p-adic numbers (computing the number of 
points on elliptic curves over a finite field) Hoffstein does not specifically disclose 
where said first and second parts compute the trace. However, Gressei discloses 
wherein said first and second parts compute the trace, (see Gressei col. 3, lines 1-7; 
col. 53, lines 13-19; col. 53, lines 49-51 : feedback of a previous operation into next 
operation; col. 3, lines 28-32; col. 1 1 , lines 7-1 1 ; col. 1 1 , lines 40-49: arithmetic 
operation or instructions) 

It would have been obvious to one of ordinary skill in the art to modify Hoffstein to 
compute a trace using partial algorithmic operations as taught by Gressei. One of 
ordinary skill in the art would have been motivated to employ the teachings of Gressei in 
order to enable the capability to provide for accelerating and securing improved 
methods for modular and exponentiation algorithmic operations, (see Gressei col. 1 , 
lines 39-45) 
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Regarding Claim 7, Hoffstein discloses the method of claim 1 in which a given p-adic 
number, (see Hoffstein col. 1, lines 56-59: p-adic numbers (computing the number of 
points on elliptic curves over a finite field) Hoffstein does not specifically disclose said 
first and second parts compute the norm. However, Gressei discloses wherein said first 
and second parts compute the norm, (see Gressei col. 3, lines 1-7; col. S3, lines 13-19; 
col. 53, lines 49-51 : feedback of a previous operation into next operation; col. 3, lines 
28-32; col. 11, lines 7-1 1 ; col. 1 1 , lines 40-49: arithmetic operation or instructions) 

it would have been obvious to one of ordinary skill in the art to modify Hoffstein to 
compute the norm using partial algorithmic operations as taught by Gressei. One of 
ordinary skill in the art would have been motivated to employ the teachings of Gressei in 
order to enable the capability to provide for accelerating and securing improved 
methods for modular and exponentiation algorithmic operations, (see Gressei col. 1 , 
lines 39-45) 

Regarding Claim 8, Hoffstein discloses the method of claim 10, further comprising: 
receiving a sequence of elliptic curves and determining the number of points on each 
elliptic curve , (see Hoffstein coi. 3, lines 59-62: col. 8, lines 7-1 1 : Frobenius operation 
on elliptic curves; utilizing elliptic curves) Hoffstein does not specifically disclose where 
said first and second parts analyze the sequence. However, Gressei discloses wherein 
said first and second parts analyze the sequence, (see Gressei col. 3, lines 1-7; col. 53, 
lines 1 3-1 9; coi. 53, lines 49-51 : feedback of a previous operation into next operation; 
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col. 3, lines 28-32; col. 11 , lines 7-1 1 ; col. 1 1 , lines 40-49: arithmetic operation or 
instructions) 

It would have been obvious to one of ordinary ski!! in the art to modify Hoffstein to 
use said first and second parts to analyze the sequence using algorithmic operations as 
taught by Gressei. One of ordinary skill in the art would have been motivated to employ 
the teachings of Gressei in order to enable the capabi!ity to provide for accelerating and 
securing improved methods for modular and exponentiation algorithmic operations, 
(see Gressei col. 1 , lines 39-45) 

Regarding Claim 9, Hoffstein discloses the method of claim 8, using one of the secure 
elliptic curves, (see Hoffstein col. 3, lines 59-62: col. 8, lines 7-11; col. 3, lines 54-56: 
Frobenius operation on elliptic curves; finite field polynomial operations) Hoffstein does 
not specifically disclose wherein generating a cryptographic key for use in a digital 
processing system using one of the secure elliptic curves. However, Gressei discloses 
wherein generating in which said analysis generates a cryptographic key for use in a 
digital processing system using one of the secure elliptic curves, (see Gressei col. 3, 
lines 28-32: arithmetic operations utilized to generate cryptographic key(s); col. 3, lines 
18-22: processor utilization for key generation) 

It would have been obvious to one of ordinary skill in the art to modify Hoffstein to 
generate cryptographic key using algorithmic operations as taught by Gressei. One of 
ordinary skill in the art would have been motivated to employ the teachings of Gressei in 
order to provide for accelerating and securing improved methods for modular and 
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exponentiation algorithmic operations, (see Gressel col. 1, lines 39-45) 

Regarding Claims 10, 13, 15, Hoffstein discloses the method of claim 1, further 
comprising: based on the number of points, identifying whether the elliptic curve is a 
secure elliptic curve, (see Hoffstein col. 3, Sines 59-62: col. 8, lines 7-1 1 ; col. 3, lines 54- 
56: Frobenius operation on elliptic curves; finite field polynomial operations; col. 1 , lines 
56-59: p-adic numbers (computing the number of points on elliptic curves over a finite 
field)) Hoffstein does not specifically disclose generating a cryptographic key. 
However, Gressel discloses generating a cryptographic key. (see Gressel col. 3, lines 
28-32: cryptographic key generation) 

It would have been obvious to one of ordinary skill in the art to modify Hoffstein to 
generate a cryptographic key as taught by Gressel. One of ordinary skill in the art 
would have been motivated to employ the teachings of Gressel in order to provide for 
accelerating and securing improved methods for modular and exponentiation 
algorithmic operations, (see Gressel col. 1 , lines 39-45) 

Regarding Claim 11, Hoffstein discloses the method of claim 1. (see Hoffstein col. 3, 
lines 59-62: col. 8, lines 7-1 1 ; col. 3, lines 54-56: Frobenius operation on elliptic curves; 
finite field polynomial operations) Hoffstein does not specifically disclose storing the 
number of points on the elliptic curve in a memory. However, Gressel discloses storing 
the number of points on the elliptic curve in a memory of the computer, (see Gressel 
col. 41, lines 20-23: register (memory) usage; storage of parameters (points)) 
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It would have been obvious to one of ordinary skii! in the art to modify Hoffstein to 
store points on the elliptic curve in memory as taught by Gressei. One of ordinary skill 
in the art would have been motivated to employ the teachings of Gressei in order to 
provide for accelerating and securing improved methods for modular and exponentiation 
algorithmic operations, (see Gressei coi. 1 , lines 39-45) 

Regarding Claims 12, 14, Hoffstein discloses a computer readable medium embodying 
program code, an integrated circuit for directing one or more processors to perform an 
operation for computing the number of points on an elliptic curve, the operation 
comprising the steps of: 

a) receiving an elliptic curve having a number of points on the curve; (see Hoffstein 
coi. 1 , lines 56-59: computations using the number of points on elliptic curves 
over a finite field) 

b) determining a number of points on the elliptic curve, wherein the determining 
includes solving a lifted Frobenius equation to a full precision by using first and 
second parts with a reduced precision, (see Hoffstein col. 1, lines 56-59: 
computations using the number of points on elliptic curves over a finite field) 
wherein the solving includes: 

a) computing, to the reduced precision (see Penner col. 1 , lines 62-63: precision 
algorithmic operations), a first partial solution of said lifted Frobenius equation 

(see Hoffstein col. 3, lines 59-62: Frobenius operation on elliptic curves; col. 
8, lines 7-1 1 : utilizing elliptic curves) using said first part (see Gressei col. 3, 
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lines 1-7; col. 53, lines 13-19; co!. 53, lines 49-51 : feedback of a previous 
operation into next operation; coi. 7, lines 28-33: col. 26, lines 6-26: partial 
result algorithmic operations) recursively (see Penner coi. 20, lines 11-16: 
recursive operations), 

b) applying a Frobenius operation to said first partial solution, (see Hoffstein coi. 
3, lines 59-62: Frobenius operation on elliptic curves; coi. 8, lines 7-1 1 : 
utilizing elliptic curves) and (see Gressel col. 3, lines 1-7; col. 53, lines 13-19; 
col. 53, lines 49-51 : feedback of a previous operation into next operation; coi. 
7, lines 28-33: col. 26, lines 6-26: partial result algorithmic operations) 

c) computing an error term for said lifted Frobenius equation, (see Hoffstein col. 
3, lines 59-62: Frobenius operation on elliptic curves; coi. 8, lines 7-1 1 : 
utilizing elliptic curves) and (see Penner col. 20, lines 8-1 1 : error terminate) 

d) computing correction factors for said lifted Frobenius equation, (see Hoffstein 
coi. 3, lines 59-62: Frobenius operation on elliptic curves; coi. 8, lines 7-1 1 : 
utilizing elliptic curves) and (see Penner coi. 20, lines 8-1 1 : error terminate) 

e) computing, to the reduced precision, a second partial solution of a modified 
lifted Frobenius equation that includes the error term and the correction 
factors using said second part, (see Hoffstein coi. 3, lines 59-62: Frobenius 
operation on elliptic curves; coi. 8, lines 7-1 1 : utilizing elliptic curves) 
wherein computing the second partial solution includes: 

a) computing, to the reduced precision (see Penner coi. 1 , lines 62-63: 
precision algorithmic operations), a third partial solution of said modified 
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lifted Frobenius equation using said second part recursively, (see Gressei 
col. 7, lines 28-33: col. 26, lines 6-26: partial result algorithmic operations) 
(see Penner col. 20, !ines 11-16: recursive operations) 

b) applying a Frobenius operation to said third partial solution, (see Hoffstein 
col. 3, lines 59-62: Frobenius operation on elliptic curves; col. 8, lines 7- 
11: utilizing elliptic curves) 

c) updating said error term, (see Penner col. 20, Sines 8-1 1 : error terminate) 

a) computing, to the reduced precision, a fourth partial solution of said 
modified lifted Frobenius equation using said second part recursively, 
(see Gressei col. 7, lines 28-33: col. 26, lines 6-26: partial result 
algorithmic operations) and (see Penner col. 20, lines 11-16: recursive 
operations) 

b) combining said third partial solution and said fourth partial solution to 
create the second partial solution, (see Gressei col. 3, lines 1-7; col. 
53, lines 13-19; col. 53, lines 49-51: feedback of a previous operation 
into next operation; col 3, lines 28-32; col. 11, lines 7-1 1 ; col. 1 1 , lines 
40-49: arithmetic operation or instructions) 

f) combining said first partial solution and said second partial solution to 
provide the solution at the full precision, (see Gressei col. 3, lines 1-7; col. 
53, lines 13-19; col. 53, lines 49-51 : feedback of a previous operation into 
next operation; col. 3, lines 28-32; co!. 1 1 , lines 7-1 1 ; col. 1 1 , lines 40-49: 
arithmetic operation or instructions) 
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Gressel discloses partial (first, second) algorithmic operations in the mathematical 
calculations to generate a cryptographic key. 

It would have been obvious to one of ordinary skill in the art to modify Hoffstein 
to perform partial algorithmic operations in the generation of a cryptographic key as 
taught by Gressel. One of ordinary skill in the art would have been motivated to 
employ the teachings of Gressel in order to enable the capability to provide for 
accelerating and securing improved methods for modular and exponentiation 
algorithmic operations, (see Gressel col. 1 , lines 39-45) 

Penner discloses canonical lift, Teichmuiier lift of a given finite-field polynomial, 
recursive operations, and precision algorithmic operations. 

It would have been obvious to one of ordinary skill in the art to modify Hoffstein 
to enable the capability to perform canonical, Teichmuiier, recursive, and error type 
algorithmic operations as taught by Penner. One of ordinary skill in the art would 
have been motivated to employ the teachings of Penner in order to enable the 
capability to provide new, novel, and efficient methods for calculating algorithmic 
transform operations, (see Penner col. 1, lines 52-55) 

Conclusion 

THIS ACTION IS IVIADE FINAL. Applicant is reminded of the extension of time 
policy as set forth in 37 CFR 1 .136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
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MONTHS from the mailing date of this action, in the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1 .138(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the mailing date of this final action. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Carlton V. Johnson whose telephone number is 571- 
270-1032. The examiner can normally be reached on Monday thru Friday , 8:00 - 
5:00PM EST. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Nasser Moazzami can be reached on 571-272-4195. The fax phone 
number for the organization where this application or proceeding is assigned is 571- 
273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
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USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 
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